Skip to content

Commit 133b016

Browse files
committed
JS: Remove old 'split' handling from TaintedUrlSuffix
1 parent e87e543 commit 133b016

File tree

1 file changed

+0
-5
lines changed

1 file changed

+0
-5
lines changed

javascript/ql/lib/semmle/javascript/security/TaintedUrlSuffix.qll

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -80,11 +80,6 @@ module TaintedUrlSuffix {
8080
name = StringOps::substringMethodName() and
8181
not call.getArgument(0).getIntValue() = 0
8282
or
83-
// Split around '#' or '?' and extract the suffix
84-
name = "split" and
85-
call.getArgument(0).getStringValue() = ["#", "?"] and
86-
not exists(call.getAPropertyRead("0")) // Avoid false flow to the prefix
87-
or
8883
// Replace '#' and '?' with nothing
8984
name = "replace" and
9085
call.getArgument(0).getStringValue() = ["#", "?"] and

0 commit comments

Comments
 (0)